porn_pic.vbs - Dangerous
porn_pic.vbs
Manual removal instructions:
Antivirus Report of porn_pic.vbs:
porn_pic.vbs
VBS.Powcox@mm
It is a partially encrypted VBS worm that attempts to email itself to every recipient in the Microsoft Outlook address book.
The email has the following characteristics:
Subject: heyy...
Body: Check this file,this is sevenC porn pic & movie
Attachment: Porn_pic.vbs
When it is run, it displays a message containing the following text:
Yesterday my body was attacked by water cow pox they attack my hand,my head,my face they all at my skin
it's hurt you know ?? Very hurt...!! I couldn't go to anywhere
I just stay at home and hope,so that fuckin water cow pox leave my body
Water cow Pox is my enemy...!!
Drops the following files:
C:\Windows\System\Porn_pic.jpg.vbs
C:\Windows\System\OEMINFO.ini
Creates a shortcut on the Windows desktop named Porn_pic.jpg, which points to the Porn_pic.jpg.vbs file.
Adds the different values, such as "NoDrives" = "67108863"; "NoClose" = "1"; "NoFind" = "1"; "NoDesktop" = "1"; "NoRun" = "1" etc.
to the registry keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network
Change IE start page to "sevenc.vze.com"
Automatic removal: Use RegRun Startup Optimizer to remove it from startup.
| porn_pic.vbs | Malware |
| porn_pic.vbs | Dangerous |
| porn_pic.vbs | High Risk |
It is a partially encrypted VBS worm that attempts to email itself to every recipient in the Microsoft Outlook address book.
The email has the following characteristics:
Subject: heyy...
Body: Check this file,this is sevenC porn pic & movie
Attachment: Porn_pic.vbs
When it is run, it displays a message containing the following text:
Yesterday my body was attacked by water cow pox they attack my hand,my head,my face they all at my skin
it's hurt you know ?? Very hurt...!! I couldn't go to anywhere
I just stay at home and hope,so that fuckin water cow pox leave my body
Water cow Pox is my enemy...!!
Drops the following files:
C:\Windows\System\Porn_pic.jpg.vbs
C:\Windows\System\OEMINFO.ini
Creates a shortcut on the Windows desktop named Porn_pic.jpg, which points to the Porn_pic.jpg.vbs file.
Adds the different values, such as "NoDrives" = "67108863"; "NoClose" = "1"; "NoFind" = "1"; "NoDesktop" = "1"; "NoRun" = "1" etc.
to the registry keys:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Network
Change IE start page to "sevenc.vze.com"
Automatic removal: Use RegRun Startup Optimizer to remove it from startup.
Dmitry Sokolov:
I created UnHackMe in 2006 to fix the problem that antivioruses did not fix: detecting rootkits.
Since that time I work every day to fix the issues that antiviruses cannot.
If your antivirus have not helped you solve the problem, you should try UnHackMe.
We are a small company and you can ask me directly, if you have any questions.